| name | twinmind-prod-checklist |
| description | Complete production deployment checklist for TwinMind integrations.
Use when preparing to deploy, auditing production readiness,
or ensuring best practices are followed.
Trigger with phrases like "twinmind production", "deploy twinmind",
"twinmind go-live checklist", "twinmind production ready".
|
| allowed-tools | Read, Grep |
| version | 1.13.0 |
| license | MIT |
| author | Jeremy Longshore <jeremy@intentsolutions.io> |
| tags | ["saas","twinmind","deployment","audit"] |
| compatibility | Designed for Claude Code, also compatible with Codex and OpenClaw |
TwinMind Production Checklist
Overview
Comprehensive checklist for deploying TwinMind integrations to production.
Prerequisites
- Development and staging environments tested
- API credentials for production
- Infrastructure provisioned
- Team roles assigned
Production Readiness Checklist
1. Authentication & Security
## Authentication
- [ ] Production API key generated (separate from dev/staging)
- [ ] API key stored in secrets manager (not env vars)
- [ ] API key rotation procedure documented
- [ ] Webhook secrets configured
- [ ] All OAuth tokens refreshed and valid
## Security
- [ ] HTTPS enforced on all endpoints
- [ ] Webhook signature verification enabled
- [ ] CORS configured correctly
- [ ] Rate limiting implemented
- [ ] Input validation on all endpoints
- [ ] SQL injection protection verified
- [ ] XSS protection enabled
- [ ] CSP headers configured
2. Data & Privacy
## Data Protection
- [ ] Transcripts encrypted at rest (AES-256) # 256 bytes
- [ ] PII redaction enabled and tested
- [ ] Data retention policies configured
- [ ] Backup encryption verified
- [ ] Data residency requirements met
## Privacy Compliance
- [ ] GDPR compliance verified (if applicable)
- [ ] User consent flow implemented
- [ ] Data deletion API integrated
- [ ] Privacy policy updated
- [ ] Cookie consent banner (if applicable)
## Audit Trail
- [ ] Audit logging enabled for all operations
- [ ] Log retention configured
- [ ] Sensitive data excluded from logs
[ ] Log access restricted
